MacOS 10.7 & client.conf

[Johan Henselmans]

Op 2/10/12 8:42 AM, Olivier Auverlot schreef:
> That's incredible. Mac OS X become more and more inadapted for the use in enterprises. Mac OS X 10.7 is simply catastrophic (stability, deploiement, integration in IT infrastructure, ...). If the sandbox is responsable of our problems with Cups, it's ridiculous. Why Apple doesn't provide a tool to disable or configure the security policies ?
> 

Why don't you send printer configuration profiles to mac os x 10.7 clients for the printers? I assume configuration
manager on 10.7 server would be very willing to do that. It is a 40 euro investment, and combined with Remote Desktop,
which is 63 euro, I assume it is a lot cheaper as to bother about security profiles which will be reset to default with
the next OS update...

> Best regards
> Olivier ;-)
> 
>>
>> The application sandbox profiles are not imposed on cupsd (which *does* sandbox filters and backends, but with a more permissive kind that allows for network access) but rather on the applications themselves, and each application tells the OS what kinds of things it needs to do.
>>
>> Since Text Edit and other non-network applications don't say they need network access, the sandboxing specifically doesn't allow network access...
>>
>> The sandbox *does* allow communication with the local cupsd, so it is mainly an issue of adding the queues you are interested in.  Bonjour (both local and wide-area through traditional DNS servers) allows you to see printers you haven't yet added and add them from the print dialog, you just can't talk to them directly (just through cupsd).
>>
>> Using BrowsePoll in cupsd.conf *may* work, but CUPS browsing is deprecated and I don't like to recommend it anymore...
>>
>>
>> On Feb 9, 2012, at 9:08 AM, Helge Blischke wrote:
>>
>>> Michael R Sweet wrote:
>>>
>>>> You'll need to add each printer you want to use - app sandboxing in Lion
>>>> prevents remote networking from working with most apps. :(
>>>>
>>>
>>> Is it possible to adapt the sandbox profile(s) imposed on cupsd to e.g.
>>> import printers from other systems?
>>>
>>> Helge
>>>
>>> _______________________________________________
>>> cups mailing list
>>> cups at easysw.com
>>> http://lists.easysw.com/mailman/listinfo/cups
>>
>> _________________________________________________________
>> Michael Sweet, Senior Printing System Engineer, PWG Chair
>>


Kind Regards,

Johan Henselmans